Contributed by grey on from the yapffe for those who don't like text editors I guess dept.
PfPro combines Java and XML to provide a graphical inteface for creating and maintaining firewall configurations for OpenBSD's PF firewall system.Screenshot.
This code is still very alpha, but working. I still have a LOT of features to add, and would gladly accept any help. While writing this I discovered XML Binding, and as such the next major release will use that instead of nasty DOM tree mangling.
My goal is to produce a best-effort platform-independent firewall utility. By using XML, configurations can be verified efficiently (by check via DTD) and possibly translated to other firewalling systems (like IPChains, via XSLT). One day I would like PfPro to be able to handle configurations for various firewall platforms through a consistent interface.
Here is the homepage and the project page.
(Comments are closed)
By Asenchi (64.118.132.155) asenchi@asenchi.com on
By j0rd (64.114.241.73) j0rd.spam@gmail on http://j0rd.ath.cx/
Comments
By StatiK76 (142.109.90.79) on
Hey, i'm no fan of java - but, what the hell are you talking about?
meh. whatever. Call me strange; I don't think there is a better method of creating pf.conf's outside of using a text editor. No offense to the authors of all these dandy eye candy yet-another-pf.conf-interface's .. But, they all suck.
StatiK76
Comments
By Anonymous Coward (209.162.235.146) on
Comments
By StatiK76 (142.109.90.79) on
Still doesn't take away from the fact that these pf.conf front ends are rather pointless (imo). Maybe i'm alone on this one - But, I just don't see the point. (I think the # of useless pf.conf frontends is at 4 or 5 now isn't it?)
I was impressed with how simple the pf.conf syntax was - does it really require a ui (let alone 4-5)?
StatiK76
Comments
By Adam VanderHook (68.55.69.153) acidos@bandwidth-junkies.net on http://acidos.bandwidth-junkies.net/
Additionally, people who use remote firewall management software on Windows will be more likely to try it if they don't have to switch their OS (this is a feature planned for a later release--to securely xfer the config and signal pf to reload it). That, along with the fact that I don't consider configure scripts #ifdef statements to be any more portable that Java, is why I use Java.
I'm already working on moving over to XML Binding, which means even more of the work will be handled via XML technologies. The Java GUI is only a third of the picture. Either use it, write a GUI conforming to your ideals, or don't.
Comments
By Anonymous Coward (195.217.242.33) on
By Anonymous Coward (195.217.242.33) on
in ports
though I believe it is the only i386 at the moment ( at least that is what the port tells me )
all platforms can compile via Jikes
Comments
By Adam VanderHook (128.183.167.178) acidos@bandwidth-junkies.net on http://acidos.bandwidth-junkies.net/
By Anonymous Coward (209.162.235.146) on
By goon (220.253.49.128) goonmailALPHATANGOnetspaceDELTAnetDELTAau on http://slashdot.org/~goon
By Nikademus (3ffe:4005:1000:4d::2) on
Comments
By tedu (66.93.171.98) on
By EAN-0x1b (216.190.249.182) on
Thanks - keep up the good work!
I wish Java was good to go on OBSD, and I understand the security concerns so I'm glad FBSD is getting PF!